Head of DevSecOps
We are looking for a hands-on DevOps Lead with deep security expertise and a product company background. This is a leadership role — you will set technical direction, own our Azure infrastructure and security posture, and drive DevOps maturity across teams. Equally important, you will stay close to the work: writing Terraform, reviewing pipelines, and solving hard infrastructure problems alongside your team.
What You'll Do
- Lead DevOps strategy and execution — CI/CD, IaC, containerization, SaaS delivery, and cloud operations.
- Own end-to-end security posture: IAM, secrets management, network segmentation, and compliance — hands-on, not just oversight.
- Define and enforce Terraform-based IaC standards across all environments.
- Drive containerization and orchestration strategy across Docker and Kubernetes.
- Set up and own observability pipelines; define SLOs and lead incident response.
- Mentor engineers, run design reviews, and raise the team's overall DevOps and security maturity.
- Collaborate with product, engineering, and client-facing teams on infrastructure decisions.
Requirements
Experience
- 10+ years in DevOps, Cloud Engineering, or SRE role — with at least 2 years in a lead or principal capacity.
- Hands-on background at a product company is required; you should be as comfortable in the terminal as you are in a design review.
- Proven track record managing SaaS infrastructure at scale, including multi-tenant environments and release pipelines.
Security & Networking (Required)
- End-to-end cloud security ownership — firewall configuration, DMZ design, VPN, and network segmentation.
- Enterprise SSO, LDAP/Active Directory, and identity federation (SAML, OAuth 2.0, OIDC).
- Secrets management using Azure Key Vault or HashiCorp Vault.
- IAM: least-privilege access, role-based policies, and audit logging.
- Working knowledge of compliance frameworks such as SOC 2 or ISO 27001.
Cloud & Infrastructure as Code
- Strong hands-on Azure experience; familiarity with AWS or GCP a plus.
- Terraform — writing modules, managing state, enforcing IaC across environments.
- Experience managing VMs, VNets, subnets, security groups, load balancers, and storage in Azure.
CI/CD & Automation
- Azure DevOps for CI/CD pipeline design and maintenance; GitHub Actions or Jenkins a plus.
- Scripting in Bash and Python
- Build tools: Maven or Gradle.
Containers & Orchestration
- Docker — image design, multi-stage builds, registry management.
- Kubernetes — cluster management, Helm, RBAC, namespaces, and rolling deployments.
Observability & Reliability
- ELK Stack for centralized logging; Prometheus, Grafana, Datadog, or Azure Monitor for metrics and alerting.
- Experience defining SLOs/SLIs and owning incident response.
Application & OS
- Strong Linux/Unix administration. Nginx, Apache, or Tomcat configuration experience.
- Working knowledge of Java or another programming language sufficient to support development teams.
Nice to Have
- GitOps workflows using ArgoCD or Flux.
- Service mesh (Istio, Linkerd) or API gateway experience.
- Cloud cost optimization experience.
